Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
File: xK3VunZitzHdCLz4c48TXZOu1FE.cer (raw, json)
Hash identifier: 0MRY5pwDo1yfYvlomCHLYce3rltLG1E190bQ0ao5p4c=
Subject key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428214A622EFA5215BD7E8B67A3DB8C12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.149.108.0/22
IP: 2a0f:4600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:4a:62:2e:fa:52:15:bd:7e:8b:67:a3:db:8c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:17:ad:48:ef:c8:4d:4a:2c:c1:89:97:30:
27:9f:d2:55:ec:62:3d:a8:0f:29:bd:11:41:26:5b:
d2:19:d5:35:95:1a:cb:c5:15:7a:54:35:5d:a2:b5:
9d:ef:82:b4:30:61:06:e9:1e:00:0d:b8:73:cb:d1:
5b:bd:0a:f0:bd:cf:43:69:1c:d2:15:59:c5:1a:97:
f8:08:8d:d4:70:61:76:b3:64:32:f8:f4:11:f1:6a:
ec:55:76:da:05:f9:40:31:c8:eb:ef:ad:87:cf:f8:
b6:2e:72:a7:0a:75:b6:7a:38:a1:a3:3b:a8:1f:6c:
dd:ff:03:a3:c7:38:7c:07:c7:f6:49:66:3e:ee:01:
35:38:a3:57:ed:f0:24:d2:f0:36:2b:a8:48:a4:0d:
38:9d:a2:52:67:03:23:6c:d2:08:70:1b:f4:55:43:
f6:18:b8:7e:e4:c7:8b:dd:ec:64:a1:57:50:4f:92:
98:d5:28:06:91:b3:f7:af:10:7c:55:c9:fa:e8:74:
8a:d1:c5:ab:14:84:ed:96:e5:01:8d:e6:c4:8d:77:
be:7a:15:83:ed:5c:fb:64:4f:fd:81:c3:80:db:9c:
1f:bb:63:fb:ae:91:40:25:24:8e:3a:33:40:70:13:
72:ee:fe:e7:db:e3:3d:8a:21:65:de:64:5c:fb:03:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.108.0/22
IPv6:
2a0f:4600::/29
Signature Algorithm: sha256WithRSAEncryption
90:16:4d:6d:96:93:68:a4:11:73:58:14:c2:7a:2a:f5:3d:ae:
33:7e:ca:1e:4a:53:f2:6d:f5:b5:8c:7b:2d:a0:fe:07:da:62:
a3:82:a7:1a:c8:68:f7:a8:3f:f5:16:f0:4b:6a:d1:ee:74:96:
90:00:4c:24:ed:b1:30:a6:a5:73:62:02:5d:1f:61:8f:53:a0:
fc:50:b6:e7:05:01:d1:9f:fe:2f:95:e4:e7:88:1c:ee:7a:55:
5e:0c:76:74:09:20:75:66:d4:ac:a5:53:8e:ef:d9:11:07:c2:
79:bf:4e:d8:76:18:0a:c5:e0:da:62:24:42:c2:42:c8:1f:ca:
4e:12:b2:e2:a0:9e:90:28:61:d5:75:85:59:da:12:6f:05:4d:
56:e4:48:ff:e4:e2:b8:ac:7d:6c:aa:4c:42:e1:67:a1:80:5e:
63:42:53:a3:f8:b2:68:bd:3f:c5:1b:18:9e:64:61:8d:5f:2b:
ce:5d:b2:78:23:b2:0a:ee:c6:e1:ec:03:5f:a3:24:aa:a7:35:
cd:56:1f:b0:6e:41:48:1e:c6:31:10:e4:f4:dd:94:18:64:bf:
e8:ad:de:a0:24:0f:28:e9:ae:e9:b0:e6:69:87:fe:51:49:b6:
6a:04:62:c1:30:94:fa:44:c6:47:94:90:ed:57:33:2d:3f:db:
8b:66:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:24 2025 by rpki-client